[runningcode]

PR Stack (Sample Tests)

• test: [Sample Tests 1] Add an in-process MockSentryServer #6266 (base: main)
• test: [Sample Tests 2] Share the system-test envelope matchers #6267 (base: test: [Sample Tests 1] Add an in-process MockSentryServer #6266)
• test(logback): [Sample Tests 3] Move the logback system test into the module #6268 (base: test: [Sample Tests 2] Share the system-test envelope matchers #6267)
• test(otel): [Sample Tests 4] Add a smoke test for the built agent #6269 (base: test: [Sample Tests 2] Share the system-test envelope matchers #6267)
• test(otel): [Sample Tests 5] Test a Spring Boot app under the agent #6271 (base: test(otel): [Sample Tests 4] Add a smoke test for the built agent #6269)
• test(spring-boot): [Sample Tests 6] Move the Boot 3 Person test into the module #6292 (base: test(otel): [Sample Tests 5] Test a Spring Boot app under the agent #6271)
• test(spring-boot): [Sample Tests 7] Move the Boot 3 tracing and HTTP client tests #6293 (base: test(spring-boot): [Sample Tests 6] Move the Boot 3 Person test into the module #6292)
• test(spring-boot): [Sample Tests 8] Move the Boot 3 cache, metrics and flag tests #6294 (base: test(spring-boot): [Sample Tests 7] Move the Boot 3 tracing and HTTP client tests #6293)
• test(spring-boot): [Sample Tests 9] Move the Boot 3 GraphQL tests into the module #6295 (base: test(spring-boot): [Sample Tests 8] Move the Boot 3 cache, metrics and flag tests #6294)
• test(spring-boot): [Sample Tests 10] Move the Boot 3 Kafka test into the module #6296 (base: test(spring-boot): [Sample Tests 9] Move the Boot 3 GraphQL tests into the module #6295)
• test(spring-boot): [Sample Tests 11] Move the Boot 4 sample's tests into the module #6297 (base: test(spring-boot): [Sample Tests 10] Move the Boot 3 Kafka test into the module #6296)
• test(spring-boot): [Sample Tests 12] Move the Boot 4 Kafka test into the module #6298 (base: test(spring-boot): [Sample Tests 11] Move the Boot 4 sample's tests into the module #6297)
• test(spring-boot): [Sample Tests 13] Move the Boot 2 sample's tests into the module #6299 (base: test(spring-boot): [Sample Tests 12] Move the Boot 4 Kafka test into the module #6298)
• test(spring-boot): [Sample Tests 14] Move the Boot 2 GraphQL and Kafka tests #6300 (base: test(spring-boot): [Sample Tests 13] Move the Boot 2 sample's tests into the module #6299)
• test(spring-boot): [Sample Tests 16] Replace the log4j2 Boot samples' system tests with a Log4j2 suite #6306 (base: test(spring-boot): [Sample Tests 14] Move the Boot 2 GraphQL and Kafka tests #6300)
• test(spring-boot): [Sample Tests 17] Move the Boot 3 WebFlux sample's tests into the module #6308 (base: test(spring-boot): [Sample Tests 16] Replace the log4j2 Boot samples' system tests with a Log4j2 suite #6306)
• test(spring-boot): [Sample Tests 18] Move the Boot 4 WebFlux sample's tests into the module #6310 (base: test(spring-boot): [Sample Tests 17] Move the Boot 3 WebFlux sample's tests into the module #6308)
• test(spring-boot): [Sample Tests 19] Move the Boot 2 WebFlux sample's tests into the module #6311 (base: test(spring-boot): [Sample Tests 18] Move the Boot 4 WebFlux sample's tests into the module #6310)
• test(spring-boot): [Sample Tests 20] Move the Boot 3 OTel no-agent sample's tests #6312 (base: test(spring-boot): [Sample Tests 19] Move the Boot 2 WebFlux sample's tests into the module #6311)
• test(spring-boot): [Sample Tests 21] Move the Boot 4 OTel no-agent sample's tests #6313 (base: test(spring-boot): [Sample Tests 20] Move the Boot 3 OTel no-agent sample's tests #6312)
• test(spring-boot): [Sample Tests 22] Move the Boot 2 OTel no-agent sample's tests #6314 (base: test(spring-boot): [Sample Tests 21] Move the Boot 4 OTel no-agent sample's tests #6313)
• test(spring-boot): [Sample Tests 23] Port the Boot 3 OTel agent sample's Person, tracing and Todo tests #6315 (base: test(spring-boot): [Sample Tests 22] Move the Boot 2 OTel no-agent sample's tests #6314)
• test(spring-boot): [Sample Tests 24] Port the rest of the Boot 3 OTel agent sample's tests #6316 (base: test(spring-boot): [Sample Tests 23] Port the Boot 3 OTel agent sample's Person, tracing and Todo tests #6315)
• test(spring-boot): [Sample Tests 25] Move the Boot 4 OTel agent sample's tests #6317 (base: test(spring-boot): [Sample Tests 24] Port the rest of the Boot 3 OTel agent sample's tests #6316)
• test(spring-boot): [Sample Tests 26] Move the Boot 2 OTel agent sample's tests #6318 (base: test(spring-boot): [Sample Tests 25] Move the Boot 4 OTel agent sample's tests #6317)
• test(spring): [Sample Tests 27] Move the Spring jakarta WAR sample's tests into the module #6319 (base: test(spring-boot): [Sample Tests 26] Move the Boot 2 OTel agent sample's tests #6318)
• test(spring): [Sample Tests 28] Move the Spring 7 WAR sample's tests into the module #6320 (base: test(spring): [Sample Tests 27] Move the Spring jakarta WAR sample's tests into the module #6319)
• test(spring): [Sample Tests 29] Move the Spring WAR sample's tests into the module #6321 (base: test(spring): [Sample Tests 28] Move the Spring 7 WAR sample's tests into the module #6320)
• test(log4j2): [Sample Tests 30] Move the log4j2 sample's system test into sentry-log4j2 #6322 (base: test(spring): [Sample Tests 29] Move the Spring WAR sample's tests into the module #6321)
• test(jul): [Sample Tests 31] Move the JUL sample's system test into sentry-jul #6323 (base: test(log4j2): [Sample Tests 30] Move the log4j2 sample's system test into sentry-log4j2 #6322)
• test: [Sample Tests 32] Add end-to-end tests of the core APIs and a profiled transaction #6324 (base: test(jul): [Sample Tests 31] Move the JUL sample's system test into sentry-jul #6323)
• test(async-profiler): [Sample Tests 33] Add an end-to-end test of a profiled transaction #6325 (base: test: [Sample Tests 32] Add end-to-end tests of the core APIs and a profiled transaction #6324)
• test(kafka): [Sample Tests 34] Add an end-to-end test of the raw Kafka client's tracing #6326 (base: test(async-profiler): [Sample Tests 33] Add an end-to-end test of a profiled transaction #6325)
• test(opentelemetry): [Sample Tests 35] Add an end-to-end test of the agentless OpenTelemetry setup #6327 (base: test(kafka): [Sample Tests 34] Add an end-to-end test of the raw Kafka client's tracing #6326)
• test(opentelemetry): [Sample Tests 36] Add an end-to-end test of the OTLP event linking #6328 (base: test(opentelemetry): [Sample Tests 35] Add an end-to-end test of the agentless OpenTelemetry setup #6327)
• test(spring-boot): [Sample Tests 37] Move the Boot 4 OTLP sample's tests into the module #6329 (base: test(opentelemetry): [Sample Tests 36] Add an end-to-end test of the OTLP event linking #6328)
• test: [Sample Tests 38] Remove the system-test runner and its Python mock server #6330 (base: test(spring-boot): [Sample Tests 37] Move the Boot 4 OTLP sample's tests into the module #6329)
• test: [Sample Tests 39] Remove the io.sentry.systemtest plugin and sentry-system-test-support #6331 (base: test: [Sample Tests 38] Remove the system-test runner and its Python mock server #6330)
• docs: [Sample Tests 40] Describe the in-module end-to-end tests instead of the system tests #6332 (base: test: [Sample Tests 39] Remove the io.sentry.systemtest plugin and sentry-system-test-support #6331)

---

📜 Description

Ports the Boot 2 sample's three GraphQL tests and its Kafka test to the integrationTest suite in sentry-spring-boot. They were the sample's last system tests, so this PR also takes the Boot 2 sample off the system-test runner and CI.

Gated on Spring Boot 2.7. Both features need Spring Boot 2.7, but the Spring Boot 2 matrix also covers 2.4 to 2.6. A bootSupportsGraphqlAndKafka flag reads the catalog's Boot 2 version, which the matrix patches. Below 2.7, the suite leaves out the GraphQL and Kafka dependencies and sources, as the sample did with excludeGraphql/excludeKafka.

Kafka runs its own context. The shared base class has to compile without spring-kafka-test on Boot 2.4–2.6, so the broker can't live there as it does for Boot 3 and 4. Instead:

• KafkaIntegrationTest activates a kafka profile and declares its own @EmbeddedKafka broker, which makes Spring start a second application context. The Kafka beans only exist under that profile.
• Each context gets its own in-memory database (jdbc:p6spy:hsqldb:mem:${random.uuid}). A first attempt shared one: the second context's schema.sql failed on the existing table, and its failed shutdown closed the global SDK, which broke every later test.
• The second context re-initializes the global Sentry SDK. The app reaches Sentry through ScopesAdapter, so this is transparent to the first context. I ran a forced order (main context → Kafka → main context) and all 11 tests passed.

Catalog. spring-kafka 2 and the new spring-kafka-test now share a springKafka2 version.

Boot 2 sample retired from system tests:

• Removes the sample's system-test wiring, including the temporary isFailOnNoMatchingTests from test(spring-boot): [Sample Tests 13] Move the Boot 2 sample's tests into the module #6299. The sample's main-source exclusions for Boot below 2.7 stay.
• Removes its runner entries.
• Removes its backend-workflow row. It was the base matrix row, so sentry-samples-spring-boot-opentelemetry-noagent takes its place.
• Removes the sample's Spring Boot 2 matrix build and test steps.

After a coverage audit against the sample's tests:

• Ports the GraphQL task query's assigneeId and creatorId checks from test(spring-boot): [Sample Tests 9] Move the Boot 3 GraphQL tests into the module #6295.

💡 Motivation and Context

With this, all three Spring Boot lines run their sample tests in-module:

Module	Tests
Boot 2	24
Boot 3	29
Boot 4	25

💚 How did you test it?

• All 24 tests pass on Spring Boot 2.7.18 and 2.7.0.
• On 2.4.13, GraphQL and Kafka drop out and the other 16 tests pass.
• A temporary JUnit suite forced the order main context → Kafka → main context, and all 11 tests in it passed.
• The slimmed sample still builds.
• :sentry-spring-boot:check passes.

📝 Checklist

• I added GH Issue ID & Linear ID
• I added tests to verify the changes.
• No new PII added or SDK only sends newly added PII if sendDefaultPII is enabled.
• I updated the docs if needed.
• I updated the wizard if needed.
• Review from the native team if needed.
• No breaking change or entry added to the changelog.
• No breaking change for hybrid SDKs or communicated to hybrid SDKs.
• Public API changes reviewed by another Mobile SDK team member or implemented according to the develop docs spec.

🔮 Next steps

The remaining flavors: WebFlux, OTel without the agent, the agent suites for Boot 2 and 4, the Spring WAR samples, and the console and logging samples.

#skip-changelog

[socket-security]

Warning

Socket is a tool Sentry Security team deployed to defend against supply chain attack. Please provide any feedback you have in #discuss-security slack channel ❤️

Priority	Alert  (click "▶" to expand/collapse)	Action
	Critical CVE: Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization in maven org.scala-lang:scala-library CVE: GHSA-8qv5-68g4-248j Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization (CRITICAL) Affected versions: >= 2.13.0 < 2.13.9 Patched version: 2.13.9 From: gradle/libs.versions.toml → maven/org.springframework.kafka/spring-kafka-test@2.8.11 → maven/org.scala-lang/scala-library@2.13.6 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore maven/org.scala-lang/scala-library@2.13.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn

View full report

[sentry]

📲 Install Builds

Android

🔗 App Name	App ID	Version	Configuration
SDK Size	io.sentry.tests.size	8.61.1 (1)	release

⚙️ sentry-android Build Distribution Settings